CVE-2023-47094

A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web…

published October 31, 2023

CVSS
—
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Published
2023-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web…
    cvelistv5